Series Overview
Complete authentication and security guide for Payload CMS: REST API auth, cookie-based sessions, auth plugins, OAuth token refresh, and production security patterns for Next.js applications.
All Articles in Series
Mastering Payload CMS API: Authentication & Queries Explained
Unlock the power of Payload CMS with our guide to REST API authentication and efficient data querying techniques.
Learn to securely authenticate and fetch specific data from Payload CMS using REST API in our comprehensive guide.
Build a Secure Email Pipeline in Next.js
Learn how to send secure transactional emails using Brevo without exposing your SMTP credentials.
Discover how to create a secure server-only email pipeline in Next.js that handles forms and sends notifications without risking credentials.
Build an IP Intelligence Firewall for Newsletter Signups
Protect Your Newsletter with Advanced IP Filtering Techniques
Learn how to build an IP intelligence firewall to protect your newsletter signups from spam and abuse. Perfect for Next.js developers!
Payload CMS Cookie Auth: 7 Troubleshooting Secrets for Next.js
Implement Payload CMS HTTP-only cookie auth with Next.js App Router: CSRF, sessions, CORS, and subdomain cookies.
Secure customer portals with Payload CMS cookie auth and Next.js: setup HTTP-only cookies, CSRF/CORS, sessions, and production fixes to stop silent 401s.
Persist Google OAuth Refresh Tokens with Next.js & Redis
Step-by-step Next.js guide using Upstash Redis to secure offline Google OAuth refresh tokens and enable background API…
Persist Google OAuth refresh tokens using Next.js and Upstash Redis to preserve refresh_token for offline access — secure background integrations without user…